$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft File: b7CqV86Epc0prEfZ19CJSOsh8Go.mft (raw, json) Hash identifier: e0KeH3o97OoMF2D/eFnth/bjisjg6/qNNumbfdHjLl8= Subject key identifier: 69:CD:DE:B0:3F:B4:6F:40:A1:DE:91:57:2C:A3:30:A3:4E:18:07:42 Authority key identifier: 6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A Certificate issuer: /CN=A91C6861/serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Certificate serial: 0BB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft Manifest number: 0BA6 Signing time: Thu 12 Jun 2025 18:47:08 +0000 Manifest this update: Thu 12 Jun 2025 18:47:07 +0000 Manifest next update: Thu 19 Jun 2025 18:47:07 +0000 Files and hashes: 1: b7CqV86Epc0prEfZ19CJSOsh8Go.crl (hash: Eh7RulpNwOLpg6ndHRoogOYOFLnofs+WpkZQNUCY8yI=) 2: 059432729E6A11EEB0983523C4F9AE02.roa (hash: RnlpXPDYIPfGNZjOgLnab/vPRagmWGYMa1TJEw32Q5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2993 (0xbb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6861, serialNumber=6FB0AA57CE84A5CD29AC47D9D7D08948EB21F06A Validity Not Before: Jun 12 18:47:07 2025 GMT Not After : Jun 19 18:47:07 2025 GMT Subject: CN=684b20ab-8e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:33:61:84:59:c4:35:66:32:95:cc:ad:af:be: 4d:75:70:5e:37:30:14:92:09:55:db:b2:a2:5c:7e: a6:db:67:03:30:9c:b2:05:6d:f2:87:41:75:7b:47: 0a:3f:a2:98:63:ff:9a:41:1f:f9:24:84:ec:d6:eb: 71:23:b1:8e:dc:6c:c0:66:50:57:7b:75:a9:c9:c6: 8f:c5:7a:12:92:6f:78:62:02:a4:cb:2f:7f:09:38: 73:d0:21:9e:3a:93:39:7a:a9:17:38:1d:fe:19:de: d4:3f:75:e9:a6:f8:5d:fd:27:0d:0b:b9:c6:e7:e2: 59:a7:47:5a:b9:df:44:94:10:e6:2b:ab:6b:38:6f: 22:a4:eb:ea:1d:59:2b:83:dc:0f:2b:05:0d:92:21: b4:85:4c:b3:57:bc:af:2a:5b:97:9c:1a:1e:07:ae: 6d:79:9c:1d:9c:b5:cc:f8:1f:6d:46:32:1d:74:fa: da:df:a1:7c:7d:81:46:c5:f8:fb:a9:a9:96:95:05: 9a:4e:20:88:6a:1b:0f:38:c7:50:1f:c3:29:94:98: 30:b9:db:15:68:c6:ee:36:20:66:0b:fa:0f:52:a9: 54:41:fc:7b:3d:6b:27:15:f1:fc:b1:7a:39:95:be: 77:67:5e:9f:c6:11:51:d8:6c:b6:82:f1:ea:4e:8b: a6:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:CD:DE:B0:3F:B4:6F:40:A1:DE:91:57:2C:A3:30:A3:4E:18:07:42 X509v3 Authority Key Identifier: keyid:6F:B0:AA:57:CE:84:A5:CD:29:AC:47:D9:D7:D0:89:48:EB:21:F0:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b7CqV86Epc0prEfZ19CJSOsh8Go.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6861/5CC21000254C11EAB702D41BC4F9AE02/b7CqV86Epc0prEfZ19CJSOsh8Go.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:4a:1a:ca:21:aa:7f:e0:f6:dc:6d:ea:aa:0e:1d:85:84:69: 5f:96:80:8b:f5:da:19:b1:5e:52:3c:a9:bd:75:c2:dd:7c:46: 24:77:7d:a7:c1:d0:9e:28:3a:fd:cc:ec:63:21:2a:f9:e6:9f: 99:4f:7c:e9:19:67:4d:74:42:cd:c9:5f:ab:9e:3a:e2:3d:1e: db:97:7f:4f:e7:52:c9:79:2e:30:03:ca:ba:74:77:38:ca:2d: 88:c1:39:bd:be:92:4e:03:54:a5:9a:3c:b1:c8:7c:33:d8:4b: 0b:fb:71:18:3c:1e:d2:8d:e1:90:0b:24:ee:da:f0:27:c6:bf: 4a:85:82:e0:02:5b:cb:11:4a:c6:d0:dd:89:8c:ec:ad:0b:04: 9c:26:d3:d2:7e:b8:4b:fd:38:17:3d:fc:8f:6e:ef:e1:e5:a2: 1f:35:22:89:79:d4:00:7b:bf:ba:da:91:3f:e8:d3:91:29:14: eb:ca:77:e1:02:6b:ea:3d:5f:dd:ab:ed:f0:18:71:3a:cc:05: 4d:f8:76:73:a6:2f:b2:01:98:11:45:ed:aa:4f:20:22:6d:78: 29:81:5f:fd:c4:f4:28:f4:c0:7d:0a:db:37:dc:49:61:d2:6f: 40:c9:00:46:f7:c0:e0:4b:3d:ec:78:22:b1:eb:27:c9:a6:a1: 87:ef:aa:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4NjExMTAvBgNVBAUTKDZGQjBBQTU3Q0U4NEE1Q0QyOUFDNDdEOUQ3RDA4OTQ4 RUIyMUYwNkEwHhcNMjUwNjEyMTg0NzA3WhcNMjUwNjE5MTg0NzA3WjAYMRYwFAYD VQQDEw02ODRiMjBhYi04ZTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAszNhhFnENWYylcytr75NdXBeNzAUkglV27KiXH6m22cDMJyyBW3yh0F1e0cK P6KYY/+aQR/5JITs1utxI7GO3GzAZlBXe3WpycaPxXoSkm94YgKkyy9/CThz0CGe OpM5eqkXOB3+Gd7UP3Xppvhd/ScNC7nG5+JZp0daud9ElBDmK6trOG8ipOvqHVkr g9wPKwUNkiG0hUyzV7yvKluXnBoeB65teZwdnLXM+B9tRjIddPra36F8fYFGxfj7 qamWlQWaTiCIahsPOMdQH8MplJgwudsVaMbuNiBmC/oPUqlUQfx7PWsnFfH8sXo5 lb53Z16fxhFR2Gy2gvHqToumZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnN3rA/ tG9Aod6RVyyjMKNOGAdCMB8GA1UdIwQYMBaAFG+wqlfOhKXNKaxH2dfQiUjrIfBq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjg2MS81Q0MyMTAwMDI1 NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBjMHByRWZaMTlDSlNPc2g4 R28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I3Q3FWODZFcGMwcHJFZloxOUNKU09zaDhHby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Njg2MS81Q0MyMTAwMDI1NEMxMUVBQjcwMkQ0MUJDNEY5QUUwMi9iN0NxVjg2RXBj MHByRWZaMTlDSlNPc2g4R28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDIShrKIap/4PbcbeqqDh2FhGlfloCL9doZsV5SPKm9dcLdfEYkd32n wdCeKDr9zOxjISr55p+ZT3zpGWdNdELNyV+rnjriPR7bl39P51LJeS4wA8q6dHc4 yi2IwTm9vpJOA1SlmjyxyHwz2EsL+3EYPB7SjeGQCyTu2vAnxr9KhYLgAlvLEUrG 0N2JjOytCwScJtPSfrhL/TgXPfyPbu/h5aIfNSKJedQAe7+62pE/6NORKRTrynfh AmvqPV/dq+3wGHE6zAVN+HZzpi+yAZgRRe2qTyAibXgpgV/9xPQo9MB9Cts33Elh 0m9AyQBG98DgSz3seCKx6yfJpqGH76om -----END CERTIFICATE-----Generated at Sat Jun 14 18:42:36 2025 by rpki-client